Secure accounting portal for Dolibarr

ComptaPortal for Dolibarr

Secure accountant portal: authenticated, controlled access to your sales and purchase invoices, without opening Dolibarr's internal interface

   Accountant portal
   Sales & purchases
   Factur-X
   Named invitations
   ZIP export
   Secure API
   Authenticated access
   Traceability

Overview

ComptaPortal is an external module for Dolibarr ERP/CRM (publisher KSIDol) that adds a secure accounting extranet.

It lets a company give its accounting firm strictly limited access to its customer and supplier invoices, without opening Dolibarr's internal interface. Access is always authenticated: the accountant has a named account with explicit permissions (viewing, download, e-mail sending, API).

The accountant browses, filters, downloads, receives by e-mail or retrieves through the API the validated invoices, without using Dolibarr's internal interface and without accessing any data other than what is authorised.

Publisher and support

Item	Information
Publisher	KSIDol
Specialty	Dolibarr integrator
Services	Custom development, SaaS hosting, Dolibarr support
Website	https://www.ksidol.io
Support	support@ksidol.io
Dolistore modules	https://www.dolistore.com/index.php?controller=search&orderby=position&orderway=desc&website=marketplace&search_query=k.s.i&submit_search=

Module information

Information	Detail
Module name	ComptaPortal
Main use	Secure accounting extranet: controlled access to sales and purchase invoices
Type	Dolibarr external module
Family	Interface / Accounting
Documented version	1.0.2
Dolibarr compatibility	Dolibarr 18.0 to 24.x
PHP compatibility	PHP 7.4 or higher
Dolibarr core modification	No
License	GNU GPLv3
Available languages	French, English, German, Spanish, Italian

Official links

Demonstration video: ComptaPortal — demo (YouTube)
Shop: KSIDol.io
Module page: ksidol.io/en
K.S.I publisher page on DoliStore: K.S.I modules on DoliStore

Module goals

Streamline exchanges between the company and its accounting firm while keeping control of the data:

give the accountant named and limited access to authorised invoices only;
avoid sharing an internal Dolibarr account or exporting documents manually;
trace every transmission (download, e-mail, API);
enable automation through a read-only API for accounting software.

For which businesses?

Companies working with an external accounting firm that want to transmit invoices without opening all of Dolibarr.
Multi-establishment companies wishing to centralise how accounting documents are made available.
Any organisation looking to industrialise the periodic transmission of invoices to its accountant.

Main features

Named invitation: e-mail, firm, language and permissions per account (customer invoices, supplier invoices, download, e-mail sending, API). Sent by e-mail or by copying the temporary link.
Account creation by the accountant: they set their own password (at least 12 characters, with uppercase, lowercase and a digit) from the received link.
Company banner: identifies the issuing company on the portal.
Document search: filters by period, origin (sales/purchases), type (invoice, credit note, down payment, progress invoice), third party and transmission status.
Download: individual PDFs, Factur-X variant when it exists.
ZIP export: archive with a CSV manifest.
E-mail sending: archive sent to one or more recipients (separated by "," or ";"), with an automatic KSIDol.io signature.
Read-only API: list and download endpoints for integration into accounting software.
Traceability: transmission log and security log.

Security and access

Access to data is always authenticated; no document is reachable through a plain anonymous link.

Named account per accountant, with explicit permissions.
Password set by the accountant (minimum 12 characters, uppercase + lowercase + digit).
Lockout after repeated failed logins.
Session expiry on inactivity (configurable duration).
CSRF token on forms.
Security log without storing the IP address in clear text.

Read-only API

Intended for integration into accounting software:

list and download endpoints;
Bearer authentication;
hashed and revocable tokens;
limited scopes and hourly call quota;
every call is logged.

Main menus

The module integrates into Dolibarr's Accounting menu. A "ComptaPortal" group adds:

Dashboard (active accounts, pending invitations, transmissions over 30 days)
Invitations
Portal accounts
Transmissions (log)
Configuration

Each entry is visible only to a user holding the associated permission.

Configuration

The configuration (Accounting → ComptaPortal → Configuration) exposes in particular:

enabling the authenticated public portal;
public URL and portal title;
default language;
invitation validity duration (hours) and inactivity duration before logout (minutes);
export limits (number of documents, size in MB);
hourly API call quota;
sender e-mail address and body of the message sent to the accountant.

Daily use

The company creates a named invitation and ticks the permissions.
The accountant receives the link, creates their account and signs in.
They search and download the invoices, export them as ZIP, or receive them by e-mail.
To automate, they create an API token and configure their accounting software.
Every transmission is logged.

User permissions

The module declares four permissions, each protecting the corresponding menu entries:

Read the ComptaPortal dashboard (portal/read)
Manage the accountant's invitations and accounts (portal/write)
Read the transmission and security logs (audit/read)
Configure ComptaPortal (setup/write)

Technical note

Dolibarr standards respected: permissions, CSRF, GETPOST, escaping. No core modification.
Hooks on the customer invoice and supplier invoice cards.
Tables created: portal accounts, invitations, API tokens, transmissions, event log.
The module exposes the files already produced by Dolibarr; it does not generate the invoices or the Factur-X.

Installation

Unzip the archive to get a comptaportal/ folder.
Copy it into htdocs/custom/ of your Dolibarr.
Check write permissions on documents/comptaportal/temp (temporary exports).
Enable the module from Home → Setup → Modules/Applications.
Open Accounting → ComptaPortal → Configuration to set up the portal.

Update

Replace the comptaportal/ folder with the new version, then reload the modules page. Existing tables and constants are preserved.

Troubleshooting

The portal is unavailable: check that the module is enabled and that the public portal is enabled in the configuration.
The invitation is invalid or expired: generate a new invitation (configurable validity duration).
E-mails are not sent: check Dolibarr's e-mail sending and the sender address in the configuration.
A PDF is unavailable: the document must have been generated and stored by Dolibarr.

Regulatory positioning

ComptaPortal makes collaboration with the accounting firm easier. It does not replace an approved electronic invoicing platform. Factur-X generation is still handled by Dolibarr or by the installed generation module.

Summary

ComptaPortal gives your accountant secure, authenticated and traced access to your sales and purchase invoices — search, download, ZIP export, e-mail sending and API — without ever opening Dolibarr's internal interface or exposing any data other than what is authorised.